> I've been doing some research into this and so far the main > cause seems > to be that we were not calling SSL_free after each connection > closed. > From what I have gathered, the correct way to cleanup after a > connection is to call the following functions in this order: > > SSL_shutdown(ssl); > SSL_free(ssl); > close(socket);
Are you creating a new SSL context for every connection? You should call SSL_CTX_free() for each context created. Is your app multithreaded? You'll need to allocate and free the mutexes (CRYPTO_set_locking_callback() and associated functions). Also call ERR_remove_state() before a thread terminates to clear it's error queue. Best Regards, Mark ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]